In earlier versions of Enterprise Security, you had to explicitly map EAServer roles to Enterprise Security roles, but beginning with Enterprise Security 6.0, mapping can be done automatically. You can still map roles explicitly if you choose. If you create new J2EE roles, explicitly mapping the J2EE roles to Enterprise Security roles requires: